NVD

Id
15462  
Name
CVE-2010-4179  
Description
The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with the ability to publish to a broker to run jobs as arbitrary users via Condor QMF plug-ins.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-12-07  
Modified Date
2010-12-08  
Seq
2010-4179  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
87355 15462 CVE-2010-4179 RHSA-2010:0921  View
87356 15462 CVE-2010-4179 RHSA-2010:0922  View
87357 15462 CVE-2010-4179 1024806  View
87358 15462 CVE-2010-4179 ADV-2010-3091  View
87359 15462 CVE-2010-4179 https://bugzilla.redhat.com/show_bug.cgi?id=654856  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36786 JVNDB-2010-002566 Red Hat Enterprise MRG の Management Console における任意のジョブを実行される脆弱性 Red Hat Enterprise Messaging、Realtime and Grid (MRG) の MRG Management Console (cumin) には、Condor の設定を行う事により、不十分なアクセス制限を付与された信頼チャネルを作成してしまうため、任意のジョブを実行される脆弱性が存在します。 CVE-2010-4179 46759 CVE-2010-4179 15462 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002566.html 2010-11-30 2011-01-04 View